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-- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, tiie maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause Uie application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )^ Responsive to communication(s) filed on 25 February 2001 . 
2a)^ This action is FINAL. 2b)n This action is non-final. 

3) n Since this application is in condition for allowance except for formal nnatters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1.3-7,9-14,16,17 and 19-35 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) 13 Claim(s) 1.3-7,9-14.16.17 and 19-35 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the. Examiner, 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1 .121 (d). 

1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-1 52. 

Priority under 35 U.S.C. § 119 

12)n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)nAII b)n Some * c)n None of: 

1 Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . This written action is responding to the amendment received on October 7^, 
2004. 

2. Applicant canceled claims 2, 8, 15, and 18. 

3. Claims 30-35 have been added. 

4. Claims 1,3-7, 9-14, 16-17, 19-35 are pending. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claims 1,3-7, 9-14, 16-17, and 19-35 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Carlson et al, US Patent No. 5506961 , hereinafter "Carlson". 

7. As per claims 1, 6-7, 12-13, 14, 17, 20, and 30, Carlson teaches "A data storage 
system for accessing a set of data, comprising: a data access manager for establishing 
a plurality of tokens for accessing the set of data; a network connection in 
communication with the data access manager; and a data storage assembly in 
communication with the network connection" in (Col 4 line 53 to Col 5 line 65, Col 8 
lines 9-10. Col 8 line 7 to Col 9 line 5, and Col 12 lines 30-40), "the data storage 
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assembly comprising (i) a set of storage locations that stores the set of data, and (ii) a 
control circuit configured to: receive from a host in communication with the data access 
manager over the network connection" in (Col 5 lines 20-64, and Col 7 lines 43-67). "(i) a 
request to access the set of data and (ii) a first access token of the plurality of tokens 
that provides access to the set of data stored in the set of storage locations in the data 
storage system" in (Col 7 line 10 to Col 9 line 5, Col 8 lines 40-55, and Col 9 lines 45- 
60); "generate an authorization signal that controls access to the set of data based on 
the first access token and a second access token of the plurality of tokens, the second 
access token associated with the set of storage locations, by performing a comparison 
of the first access token to the second access token associated with the set of storage 
location, if the comparison indicates that the first access token and the second access 
token are identical, produce an access approval signal that provides access to the set of 
storage locations; and if the comparison indicates that the first access token and the 
second access token are not identical, produce an access failure signal that indicates a 
denial of access to the set of storage locations; and produce a response signal that 
provides a response to the request over the network connection to the host based on 
the authorization signal" in (Col 6 lines 44-67, Col 9 lines 45-60, and Col 8 line 5 to Col 
9 line 5). However, Carlson does not teach specifically that the request to access the 
set of data and a first access token. Nevertheless, the token gets generation when a 
host sends a request message to the system authorizer mechanism (data access 
manager). Further, Carlson also teaches that the token can also be reused multiple 
times for continued access (Col 8 lines 40-55). When the token get generated as 
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requested, the server token is stored in the database based on the use condition of the 
token. For the reuse token, it will be stored to authenticate the remote terminal. As 
long as the terminal has the copy of the token, the access control manager will 
authorize the access to the set of the storage device. Therefore, it would have been 
obvious at the time of the invention was made for one having ordinary skill in the art to 
realize that the first request message is the registration message to initiate the 
generation of the access control token, such as reusable token, for the host later uses. 
Further, the reusable token would allow the client to send a request with the usable 
token to get access the set of storage locations at anytime as the client desires (Col 8 
lines 40-55, and Col 9 lines 45-60). Obviously, the reusable token reads on the 
applicant invention clearly, 

8. As per claims 3, 9-10, 23, 27. and 29, the rejection of claim 1 is incorporated and 
further Carlson teaches the association, prior to receiving the first access token, the 
second access token with the set of storage locations in response to an initial request 
from the host to store the set of data (Col 8 lines 15-18), and tagging each storage 
location with the second access token (Col 8 lines 15-18). However, Carlson does not 
teach the allocation of the set of storage locations in the data storage assembly to 
receive the set of data in response to the request to store the set of data. Nevertheless, 
Carlson does teach the access privilege of the PWS as to read or write from a particular 
storage device location (Col 8 lines 1-5). Therefore, it is obvious at the time of the 
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invention was made for one of ordinary skill that Carlson explicitly teaches the allocation 
of the set of storage locations in the data storage to store data (Col 9 lines 45-62). 

9. As per claims 5, 11, 16, 19, 22, and 24, Carlson discloses the data storage 
system of claims 1 , 7, 14, 17, 21 , and 23, wherein the request is one of a read request 
to read data from at least one of the set of storage locations and a write request to write 
data to at least one of the set of storage locations (Col 8 lines 1-5, and Col 9 lines 45- 
62). 



10. As per claims 21, 25, 26, 28, and 32, claim 1 rejection is incorporated. Further, 
Carlson teaches an input/output controller to the data storage system (Col 1 lines 15-26, 
Col 4 line 55 to Col 5 line 67, and Col 7 line 44 to Col 8 line 5). 



11. As per claim 31 , Carlson teaches "the data storage system of claim 30 wherein 
the device oriented, block based command comprises a SCSI command, the control 
circuit is configured to receive the SCSI command via non-channel communications 
using a transport protocol" in (Col 4 line 55 to Col 5 line 67). 

12. As per claims 33-34, Carlson teaches "The data storage system of claims 1 and 
21 wherein, when receiving, the control circuit is configured to received from the host in 
communication with the data access manager over the network connection the first 
access token of the plurality of tokens that provides access to the set of data stored 
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within a range of disk addresses in the set of storage locations of the data storage 
assembly, the range of disks addresses distinct from file names associated with the set 
of data; and when generating, generate an authorization signal that controls access to 
the set of data based on the first access token and a second access token of the 
plurality of tokens, the second access token associated with the range of disk 
addresses in the set of storage locations" in (Col 7 line 43 to Col 8 line 5. and Col 9 
lines 45-62), 

13. As per claim 35, claim 21 rejection is incorporated. However, Carlson does not 
specifically teach the range of disk addresses in the set of the storage locations in the 
data storage system. Nevertheless, Carlson does teach the information ID field, which 
is used to identify the information or where to locate the information. In one preferred 
embodiment, Carlson teaches "a table (not shown) which correlates particular 
information IDs to the location of the information is used; however, any means for 
associating a request for particular information to the location of the information could 
be used" in (Col 7 line 44 to Col 8 line 5, and Col 9 lines 45-62). Therefore, it would 
have been obvious at the time of the invention was made for one having ordinary skill in 
the art to realize that the infomriation ID can be interpreted as the range of disk or 
storage devices addresses. 
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Response to Amendment 



14. Applicant has amended claims 1,13, 26, and 28, and has added new claims 30- 
35, which necessitated new grounds of rejection. See Rejections above. 

15. As per remark on Page 19 4^ paragraph to Page 20 1®* paragraph, the applicant 
argued that Carlson does not teach the implementation of "a first token to get and 
generate an authorization signal that controls access to the set of data based on the 
first access token and a second access token of the plurality of tokens, second token 
associated with the set of storage locations" and "generation of an authorization signal 
to provide access or denial of access to a set of storage locations, to access a set of 
data, based upon a comparison of a first access token and a second access token". 
Nevertheless, on Col 6 lines 45-60 states clearly how the tokens get compared for 
authorization to access the set of data. The authorization signal is the informing of the 
server connection manager to the client connection manager regarding to the 
authorized access or the denial access. On Col 8 line 6-1 1 , teaches the generation of 
the tokens for the client uses to access the resource when desired. On Col 9 lines 45- 
60, teaches the association of the token to a set of the storage device locations. 

16. As per remark on Page 20 paragraph 3, see the rejection of claims 30-35. 



Conclusion 
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17. Applicant's annendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly. THIS ACTION IS MADE FINAL. See MPEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

18. A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Conclusion 

19. Any inquiry concerning this communication from the examiner should be directed 
to Linh Son whose telephone number is (571)-271-3856. 

20. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor Kim Y. Vu can be reached at (571)-272"3859. The fax numbers for this 
group are (703)-872-9306 (official fax). Any inquiry of general nature or relating to the 
status of this application or proceeding should be directed to the group receptionist 
whose telephone number is (571)-272-2100. 
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21 . Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval IPAIR.I system. Status information for 
published applications may be obtained from either Private PMR or Public PMR. Status 
information for unpublished applications is available through Private PMR only. For 
more infomiation about the PAIR system, see http://pzr-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 



Patent Examiner 



Linh LD Son 



. jrEpVlSORY PATENT EXAMINER 
TLCriMOLOGY CENTER 2100 




